tickets #130297
closedPlan for migrating the primary freeipa to freeipa2
0%
Description
We don't really want to rely on the old freeipa machine forever, so let's plan the migration path.
https://www.freeipa.org/page/Howto/Migration
Since this can go horribly wrong, it would be nice to have somebody who has more access as a backup in order to restore the functionality of the vpn.
Updated by crameleon almost 2 years ago
- Private changed from Yes to No
I know this is a bigger idea, but do we want to keep FreeIPA or use the opportunity to migrate to a different solution? After all, we barely use any of the features FreeIPA offers.
Updated by crameleon almost 2 years ago
That being said, happy to be on stand-by for console access - just ping in IRC when you plan to start.
Updated by luc14n0 almost 2 years ago
crameleon wrote:
I know this is a bigger idea, but do we want to keep FreeIPA or use the opportunity to migrate to a different solution? After all, we barely use any of the features FreeIPA offers.
I kind of feel the same here.
Updated by crameleon over 1 year ago
What's the status of this? I notice freeipa.i.o.o runs Fedora 25 which is an operating system that reached it's End Of Life almost 5 years ago.
Updated by hellcp over 1 year ago
I mean, I think we could do this any day, just a matter or making a commitment
Updated by crameleon over 1 year ago
- Status changed from New to Rejected
There didn't seem to be any commitment and nobody seems to be willing to administrate CentOS/Fedora.
We will probably switch to a Kanidm based solution based on openSUSE.
Updated by hellcp over 1 year ago
That's kind of what I was eyeing as well, but I wanted to at least decommission the old Fedora system that was still around for something we can at the very least update, especially since we will have an easier time migrating to kanidm from newer freeipa